Lucene search
+L

23231 matches found

SUSE CVE
SUSE CVE
added 2024/09/05 2:46 a.m.11 views

SUSE CVE-2024-44991

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

5.5CVSS6.4AI score0.00245EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2024/09/05 12:00 a.m.92 views

RHEL 8 : kernel (RHSA-2024:6206)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6206 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel:TCP-spoofed ghost ACKs and leak...

9.8CVSS7.1AI score0.0117EPSS
SaveExploits0References69
RedhatCVE
RedhatCVE
added 2024/09/04 10:15 p.m.16 views

CVE-2024-44991

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

4.7CVSS7.4AI score0.00245EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/04 8:15 p.m.7 views

DEBIAN-CVE-2024-44991

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

5.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/04 8:15 p.m.14 views

AZL-48657 CVE-2024-44974 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp selectlocaladdress and selectsignaladdress both select an endpoint entry from the list inside an RCU protected section, but return a reference to it, to be read later on. If the...

7.8CVSS6.3AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/04 8:15 p.m.7 views

DEBIAN-CVE-2024-44974

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp selectlocaladdress and selectsignaladdress both select an endpoint entry from the list inside an RCU protected section, but return a reference to it, to be read later on. If the...

7.8CVSS5.7AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/04 8:15 p.m.8 views

UBUNTU-CVE-2024-44974

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp selectlocaladdress and selectsignaladdress both select an endpoint entry from the list inside an RCU protected section, but return a reference to it, to be read later on. If the...

7.8CVSS6.2AI score0.00272EPSS
SaveExploits0References16
Cvelist
Cvelist
added 2024/09/04 7:54 p.m.26 views

CVE-2024-44991 tcp: prevent concurrent execution of tcp_sk_exit_batch

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

0.00245EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/04 7:54 p.m.19 views

CVE-2024-44991 tcp: prevent concurrent execution of tcp_sk_exit_batch

In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcpskexitbatch Its possible that two threads call tcpskexitbatch concurrently, once from the cleanupnet workqueue, once from a task that failed to clone a new netns. In the latter case, error...

6AI score
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2024/09/04 3:30 p.m.20 views

Missing connection timeout in Aardvark-dns

A flaw was found in Aardvark-dns versions 1.12.0 and 1.12.1. They contain a denial of service vulnerability due to serial processing of TCP DNS queries. This flaw allows a malicious client to keep a TCP connection open indefinitely, causing other DNS queries to time out and resulting in a denial ...

7.5CVSS7.3AI score0.00765EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2024/09/04 3:30 p.m.10 views

GHSA-G5JH-57WM-P79M Missing connection timeout in Aardvark-dns

A flaw was found in Aardvark-dns versions 1.12.0 and 1.12.1. They contain a denial of service vulnerability due to serial processing of TCP DNS queries. This flaw allows a malicious client to keep a TCP connection open indefinitely, causing other DNS queries to time out and resulting in a denial ...

8.7CVSS7.1AI score0.00765EPSS
SaveExploits1References8
OSV
OSV
added 2024/09/04 3:15 p.m.5 views

DEBIAN-CVE-2024-8418

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS7.2AI score0.00765EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/04 3:15 p.m.15 views

CVE-2024-8418

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS0.00765EPSS
SaveExploits1References5
OSV
OSV
added 2024/09/04 3:15 p.m.7 views

UBUNTU-CVE-2024-8418

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS5.7AI score0.00765EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2024/09/04 2:24 p.m.31 views

CVE-2024-8418 Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS0.00765EPSS
SaveExploits1References5
CVE
CVE
added 2024/09/04 2:24 p.m.141 views

CVE-2024-8418

CVE-2024-8418 affects aardvark-dns across multiple Linux distributions. The issue is a Denial of Service caused by serial processing of TCP DNS queries, where an attacker can keep a TCP connection open to stall the server and cause other DNS queries to time out, resulting in DNS service downtime....

7.5CVSS7.2AI score0.00765EPSS
SaveExploits1References5Affected Software1
AlpineLinux
AlpineLinux
added 2024/09/04 2:24 p.m.35 views

CVE-2024-8418

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS7.3AI score0.00765EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2024/09/04 2:24 p.m.10 views

CVE-2024-8418 Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS7.3AI score0.00765EPSS
SaveExploits1References5
OSV
OSV
added 2024/09/04 2:24 p.m.11 views

CVE-2024-8418 Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS7AI score
SaveExploits0References9
Debian CVE
Debian CVE
added 2024/09/04 2:24 p.m.10 views

CVE-2024-8418

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

7.5CVSS7.2AI score0.00765EPSS
SaveExploits1
Rows per page
Query Builder